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(57) [Abstract] 

[Object] jn a general transaction processing system, it is an object to realize 
guarantee of data authenticity, with a cheap configuration and without requiring special 
hardware. 

1 0 [Means] A data authenticity guarantee server comprises: a unit that backs up a file in 
a transaction processing system to a mass storage at a predetermined timing; a unit 
that generates a hash value by a hash function, using the file as a parameter, along 
with the backup, and stores it in a memory; a unit that reads the file from the 
transaction processing system based on a request for verifying the authenticity, 

1 5 generates a hash value by the hash function, using the file as a parameter, reads the 
hash value at the time of the previous hash from the memory, and compares it with a 
newly generated hash value, to verify the data authenticity; and a unit that determines 
that the data has been falsified, when these do not agree with each other as a result of 
comparison of hash values, and restores the file based on the backup file stored in the 

20 mass storage. 

[What is Claimed is] 

[Claim 1] A simplified data authenticity guarantee system having a transaction 

processing system, a mass storage, and a data authenticity guarantee server, wherein 
25 the data authenticity guarantee server comprises: 
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a unit that backs up a file in the transaction processing system, for which the 
authenticity is to be secured, to a mass storage at a predetermined timing; 

a unit that generates a hash value by a hash function, using the file as a 
parameter, along with the backup by the unit, and stores the hash value in a memory; 
5 a unit that reads the file from the transaction processing system based on a 

request for verifying the authenticity of the file, generates a hash value by the hash 
function by using the file as a parameter, reads the hash value of the file at the time of 
the previous hash from the memory, and compares it with a newly generated hash 
value, to verify the data authenticity; and 
10 a unit that determines that the data has been falsified, when these do not 

agree with each other as a result of comparison of hash values, and restores the file 
based on the backup file stored in the mass storage. 

[Claim 2] The simplified data authenticity guarantee system according to claim 

1 , further comprising: 

15 a unit that adds an electronic signature to the hash value, at the time of hash 

along with the backup; and 

a unit that verifies the authenticity of the electronic signature added to the 

previous hash value, at the time of verifying the data authenticity. 

[Claim 3] The simplified data authenticity guarantee system according to claim 

20 1 or 2, further comprising a unit that records the process of authenticity verification of 

the file in a log file. 

[Claim 4] The simplified data authenticity guarantee system according to any 

one of claims 1 to 3, further comprising a unit that notifies an administrator of the result 
of authenticity verification relating to the file. 
25 [Claim 5] A simplified data authenticity guarantee method for securing the data 
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authenticity of a file held by a transaction processing system, wherein 
a data authenticity guarantee server comprises: 

a step of backing up the file in the transaction processing system, for which 
the authenticity is to be secured, to a mass storage at a predetermined timing; 
5 a step of generating a hash value by a hash function, using the file as a 

parameter, along with the backup, and storing the hash value in a memory; 

a step of reading the file from the transaction processing system based on a 
request for verifying the authenticity of the file, generating a hash value by the hash 
function by using the file as a parameter, reading the hash value of the file at the time of 
1 0 the previous hash from the memory, and comparing it with a newly generated hash 
value, to verify the data authenticity; and 

a step of determining that the data has been falsified, when these do not 
agree with each other as a result of comparison of the hash values, and restoring the 
file based on the backup file stored in the mass storage. 
1 5 [Claim 6] The simplified data authenticity guarantee method according to claim 

5, further comprising: 

a step of adding an electronic signature to the hash value, at the time of hash 
along with the backup; and 

a step of verifying the authenticity of the electronic signature added to the 
20 previous hash value, at the time of verifying the data authenticity. 

[Claim 7] The simplified data authenticity guarantee method according to claim 

5 or 6, further comprising a step of recording the process of authenticity verification of 
the file in a log file. 

[Claim 8] The simplified data authenticity guarantee method according to any 

25 one of claims 5 to 7, further comprising a step of notifying an administrator of the result 
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of authenticity verification relating to the file. 

[Claim 9] A simplified data authenticity guarantee program for securing the 

data authenticity of a file held by a transaction processing system, which makes a data 
authenticity guarantee server execute: 
5 a process for backing up the file in the transaction processing system, for 

which the authenticity is to be secured, to a mass storage at a predetermined timing; 

a process for generating a hash value by a hash function, using the file as a 
parameter, along with the backup, and storing the hash value in a memory; 

a process for reading the file from the transaction processing system based 
10 on a request for verifying the authenticity of the file, generating a hash value by the 
hash function by using the file as a parameter, reading the hash value of the file at the 
time of the previous hash from the memory, and comparing it with a newly generated 
hash value, to verify the data authenticity; and 

a process for determining that the data has been falsified, when these do not 
1 5 agree with each other as a result of comparison of the hash values, and restoring the 
file based on the backup file stored in the mass storage. 

Fig. 1 is a diagram of the configuration of a simplified data authenticity 
guarantee system in the first embodiment of the present invention. 

20 

. [Explanation of Reference Signs] 
1 00 General transaction processing system 

200 Document storage 

201 Large capacity backup file storage section 
25 300 Data authenticity guarantee server 
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301 Data backup processor 

302 Hash value generation processor 

303 Data substantially verification processor 

304 Data restoration processor 
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